Static task
static1
Behavioral task
behavioral1
Sample
d3a799ef992df4f85b4acee765a7bb56.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d3a799ef992df4f85b4acee765a7bb56.exe
Resource
win10v2004-20240226-en
General
-
Target
d3a799ef992df4f85b4acee765a7bb56
-
Size
91KB
-
MD5
d3a799ef992df4f85b4acee765a7bb56
-
SHA1
69d10b33becee95d8456548ad4ad7dc5f9c002ea
-
SHA256
6e59ad288ecf38a46dc7958d14f09d77b9bca90e0f2d9b90805472909548458d
-
SHA512
ba1afb5a2c808e064f040dcadb7e1d07e6dd18188c89be4e353ef854ea189a7f21b80a05979ffa79679ced89d11f51c1dfdd4d9e498c9ee097e2d44bbf1a185e
-
SSDEEP
1536:fU6JhlQvW4R8ZDW2OsdCj7VhJ/YY5rInouy8rTSY+A37feaCMJDmYsLIb4PvYqHD:fRhlARSOsdwD/98out3SDADeak7dJHB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3a799ef992df4f85b4acee765a7bb56
Files
-
d3a799ef992df4f85b4acee765a7bb56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE